Lucene search
+L

CVE-2023-5452

🗓️ 06 Oct 2023 19:27:24Reported by @huntrdevType 
cve
 cve
🔗 web.nvd.nist.gov👁 90 Views🌐 WEB

CVE-2023-5452 Cross-site Scripting in GitHub repository snipe/snipe-i

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
SnipeIT 6.2.1 - Stored Cross Site Scripting Vulnerability
12 Mar 202400:00
–zdt
circl
Circl
CVE-2023-5452
7 Oct 202300:13
–circl
cnnvd
CNNVD
Snipe-IT Cross-Site Scripting Vulnerability
6 Oct 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
6 Oct 202319:27
–cvelist
huntr
Huntr
Stored Cross Site Scripting (XSS)
5 Oct 202316:30
–huntr
exploitdb
Exploit DB
SnipeIT 6.2.1 - Stored Cross Site Scripting
12 Mar 202400:00
–exploitdb
euvd
EUVD
EUVD-2023-2807
3 Oct 202520:07
–euvd
github
Github Security Blog
Cross-site Scripting in snipe/snipe-it
6 Oct 202321:30
–github
mend
Mend
CVE-2023-5452
6 Oct 202319:27
–mend
nvd
NVD
CVE-2023-5452
6 Oct 202320:15
–nvd
Rows per page
NVD
Vulners
Vulnrichment
Node
[
  {
    "vendor": "snipe",
    "product": "snipe/snipe-it",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "v6.2.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
namerequest body/api/v1/locationsStored XSS via location creation endpoint where payloads in name/city are stored and later rendered in the UI.CWE-79
cityrequest body/api/v1/locationsStored XSS via location creation endpoint where payloads in name/city are stored and later rendered in the UI.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:48Current
6Medium risk
Vulners AI Score6
CVSS 3.15.4
CVSS 35.5
EPSS0.00609
SSVC
90